1. Home
  2. CVE Database
  3. CVE-2009-4334
MEDIUM · 4.6

CVE-2009-4334

The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of...

Vulnerability Description

The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file.

CVSS Score

4.6

MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
IbmDb29.1

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2009-4334?

CVE-2009-4334 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of...

How severe is CVE-2009-4334?

CVE-2009-4334 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-4334?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2.